Bank Chief Risk Officer Jobs in Virginia (NOW HIRING)

Job Family:

Management Consulting

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Guidehouse continues to expand its Financial Services Risk Management & Regulatory Compliance practice and is seeking an experienced Associate Director to help clients address emerging risks across cybersecurity, information security, data governance, AI, and enterprise risk management. This leader will bring deep domain expertise in technology and non-financial risk to advise financial institutions through transformation, modernization, and regulatory remediation initiatives. Responsibilities include, but are not limited to, the following:

• Lead complex client engagements focused on cybersecurity risk, information security governance, data risk, AI risk management, enterprise risk management (ERM), operational risk, and technology risk across banking, capital markets, payments, fintech, and insurance clients.

• Design and execute enterprise risk assessment, technology risk assessment, data and AI risk assessment, controls evaluations, maturity assessments, and target operating model initiatives.

• Advise clients on the design, enhancement, and implementation of risk management frameworks aligned with industry standards and regulatory expectations, including NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 27001, COBIT, FFIEC guidance, and applicable banking regulations.

• Support clients in developing sustainable governance models for cybersecurity, information security, data governance, AI governance, technology risk management, model risk management, third-party risk management, and operational resilience.

• Lead remediation programs, including Matters Requiring Attention (MRAs), Matters Requiring Immediate Action (MRIAs), consent orders, internal audit findings, and enterprise risk transformation initiatives.

• Develop executive-ready reports, presentations, risk assessments, operating models, governance documentation, policies, and strategic recommendations for senior client stakeholders.

• Serve as a trusted advisor to client executives, including Chief Risk Officers (CROs), Chief Information Security Officers (CISOs), Chief Data Officers (CDOs), Chief AI Officers, Chief Technology Officers (CTOs), Internal Audit leaders, and business executives.

• Manage multiple workstreams and engagement teams, ensuring delivery excellence, quality, budget management, and client satisfaction.

• Anticipate and resolve client concerns quickly.

• Coach, mentor, and develop junior level staff while fostering an inclusive, collaborative, and high-performing team environment.

• Contribute to business development by supporting proposals, solution development, client pursuits, relationship expansion, and thought leadership activities.

• Work with other leaders to develop intellectual property, methodologies, accelerators, and market-facing thought leadership related topics such as cyber risk, data & AI governance, technology risk, and enterprise risk management.

• Develop collaborative relationships with the other related specialty practices and non-specialty practices across the firm to cross-sell relevant products and services.

What You Will Need:

• Bachelor's degree.

• Minimum Seven(7) years of cybersecurity, information security, technology risk, enterprise risk management, operational risk, data governance, AI governance, or regulatory compliance experience at national and regional financial institutions, crypto/digital assets exchanges, securities / capital markets institutions, regulatory / government agencies, and / or consulting or audit firms.

• Deep understanding of banking industry (Mortgage, Auto, Student, Credit Card, and / or Unsecured Lending, etc.).

• Deep knowledge of laws and regulations as well as enforcement actions

• Experience performing risk assessment; controls design, implementation, assessment, and testing; third party risk management; compliance program; regulatory change management; compliance testing; and / or regulatory inquiry and response projects.

• Experience designing and implementing risk frameworks aligned to industry standards such as: NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 27001, COBIT, COSO ERM.

• Outstanding project management skills to include motivating team, training, developing and supervising team, and invoicing.

• Outstanding communication and public speaking skills.

• Proficient in Microsoft Outlook, Word, Excel, Power Point, and SharePoint.

• Highly motivated, driven, and dynamic attitude towards work and career.

• Willingness to travel whenever needed based on client and project needs.

• High-energy, positive, persuasive, and aptitude to lead by example.

What Would Be Nice To Have:

• Master's degree.

• Professional certifications such as: CISSP, CISM, CRISC, CGEIT, CISA, Certified in Risk and Information Systems (CRISC), Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Third-Party Risk Professional (CTPRP), Project Management Professional (PMP), AWS, Azure, or Google Cloud security certifications.

• Experience with AI governance frameworks, Responsible AI programs, model governance, or AI regulatory compliance.

• Experience with cloud security governance, DevSecOps, data security, or emerging technology risk.

• Experience supporting regulatory examinations, consent orders, MRAs, MRIAs, or internal audit remediation programs.

• Experience working with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow, MetricStream, etc.

• Demonstrated ability to build collaborative relationships across cross-functional teams and support practice growth initiatives.

• Extremely driven, energetic, and able to thrive in a results-oriented, entrepreneurial, and analytical environment.

The annual salary range for this position is $149,000.00-$248,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com.  Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse.  Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.